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Abstract. We show that the theory ZFC-, consisting of the usual axioms of 
ZFC but with the power set axiom removed — specifically axiomatized by ex- 
tensionality, foundation, pairing, union, infinity, separation, replacement and 
the assertion that every set can be well-ordered — is weaker than commonly 
C'~'3 ' supposed and is inadequate to establish several basic facts often desired in its 

context. For example, there are models of ZFC- in which u)\ is singular, in 
which every set of reals is countable, yet u)\ exists, in which there are sets of 
reals of every size N n , but none of size N^, and therefore, in which the col- 
lection axiom fails; there are models of ZFC- for which the Los theorem fails, 

Oeven when the ultrapower is well-founded and the measure exists inside the 
model; there are models of ZFC- for which the Gaifman theorem fails, in that 
■ there is an embedding j : M — > N of ZFC- models that is Si-elementary and 

cofinal, but not elementary; there are elementary embeddings j : M — ¥ N of 
ZFC- models whose cofinal restriction j : M — ¥ (Jj " M is not elementary, 
i Moreover, the collection of formulas that are provably equivalent in ZFC- to a 

Si-formula or a ni-formula is not closed under bounded quantification. Nev- 
ertheless, these deficits of ZFC- are completely repaired by strengthening it 
to the theory ZFC - , obtained by using collection rather than replacement in 
the axiomatization above. These results extend prior work of Zarach [Zar96]. 

> 

o 

CO 

. Set theory without the power set axiom is used in arguments and constructions 

throughout the subject and is usually described simply as having all the axioms 
of ZFC except for the power set axiom. This theory arises frequently in the large 
cardinal theory of iterated ultrapowers, for example, and perhaps part of its at- 
traction is an abundance of convenient natural models, including (H K ,(z) for any 
uncountable regular cardinal k, where H K consists of sets with hereditary size less 
than k. When prompted, many set theorists offer a precise list of axioms: exten- 
sionality, foundation, pairing, union, infinity, separation, replacement and choice. 
For instance, the theory is described as "ZFC with the Power Set Axiom deleted" 
by [Kan03] (ch. 19, p. 244) and as "set theory without the Power Set Axiom" 
by [Jec03] (ch. 19, p. 354) in their treatment of iterated ultrapowers, with ZFC 
and "set theory" referencing the list of axioms given above. Various other authors 
describe the theory as "ZFC minus the power-set axiom" [AbrlO] (ch. 5, p. 380), 
"standard axioms of ZFC excluding the powerset axiom" [NcelO] (ch. 22, p. 1883), 
or verify replacement (rather than collection) when determining whether a given 



1. Introduction 



The research of each of the authors has been supported in part by research grants from the 
CUNY Research Foundation. The second author's research has been additionally supported by a 
research grant from the National Science Foundation and another from the Simons Foundation. 
The third author is grateful to the Kurt Godel Research Center at the University of Vienna for 
the support of his 2009—10 post-doctoral position there, funded in part by grant P20835-N13 from 
the Austrian Science Fund. 



1 



2 VICTORIA GITMAN, JOEL DAVID HAMKINS, AND THOMAS A. JOHNSTONE 

structure satisfies the theory. The authors of the current paper have in the past 
described the theory as ZFC without the power set axiom [HJ10, Gitll]. 1 Let 
us denote by ZFC- the theory having the axioms listed above with the axiom of 
choice taken to mean Zermelo's well-ordering principle, which then implies Zorn's 
Lemma as well as the existence of choice-functions. These alternative formulations 
of choice are not all equivalent without the power set axiom as is proved by Zarach 
in [Zar82], 2 who initiated the program of establishing unintuitive consequences of 
set theory without power set, which we carry on in this paper. Since our aim is to 
emphasize the weakness of the replacement scheme in the absence of power set, we 
opt here for the strongest variant of choice. 

In this article, we shall prove that this formulation of set theory without the 
power set axiom is weaker than may be supposed and is inadequate to prove a 
number of basic facts that are often desired and applied in its context. Specifically, 
we shall prove that the following behavior can occur with ZFC- models. 

(1) (Zarach) There are models of ZFC- in which the countable union of count- 
able sets is not necessarily countable, indeed, in which cj\ is singular, and 
hence the collection axiom scheme fails. 

(2) (Zarach) There are models of ZFC- in which every set of reals is countable, 
yet u>i exists. 

(3) There are models of ZFC- in which for every n < u, there is a set of reals 
of size H„, but there is no set of reals of size 

(4) The Los ultrapower theorem can fail for ZFC- models. 

(a) There are models M \= ZFC- with an M-normal measure \i on a 
cardinal k in M, for which the ultrapower by fi, using functions in M, 
is well-founded, but the ultrapower map is not elementary. 

(b) Such violations of Los can arise even with internal ultrapowers on a 
measurable cardinal n, where P(k) exists in M and /i £ M. 

(c) There is M \= ZFC- in which P(w) exists in M and there are ultrafil- 
ters fi on uj in M, but no such M-ultrapower map is elementary. 

(5) The Gaifman theorem [Gai74] can fail for ZFC- models. 

(a) There are £i-elementary cofinal maps j : M — > N of transitive ZFC- 
models, which are not elementary. 

(b) There are elementary maps j : M — >• N of transitive ZFC- models, 
such that the canonical cofinal restriction j : M — > (J j " M is not 
elementary. 

(6) Seed theory arguments can fail for ZFC- models. There are elementary 
embeddings j : M — > N of transitive ZFC- models and sets S C [J j " M 
such that the seed hull X s = {j(f)(s) \ s e [S] <u ,f G M} of S is not an 
elementary submodel of N. In this case, the restriction j : M — > is a 
cofinal Ei-elementary map that is not elementary. 

(7) The collection of formulas that are provably equivalent in ZFC- to a Si- 
formula or a Lli-formula is not closed under bounded quantification. 



In contrast, Zarach in [Zar82] explicitly includes the collection scheme instead of replacement 
in his definition of ZF — , as does Devlin in [Dev84] (p. 119). Jensen, also, reportedly used collection 
rather than replacement in his course notes. The results of this article show that using collection 
in place of replacement is a critical difference. 

2 Zarach [Zar82] credits Z. Szczpaniak with first showing that there are models of ZF _ in which 
choice-functions exist but Zermelo's well-ordering principle fails. 
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The subsequent theorems of this article contain all the details, including additional 
undesirable behavior for ZFC- models. The counterexample ZFC- models we pro- 
duce can be arranged to satisfy various natural strengthenings of ZFC-, to include 
such statements as Hartogs' theorem that H Q exists for every ordinal a, or alterna- 
tively the assertion "7 am Hg+ ," meaning the assertion that 9 is the largest cardinal 
and every set has hereditary size at most 9. 

The fact that the replacement axiom scheme does not imply the collection axiom 
scheme without the power set axiom was first proved by Zarach [Zar96] , who knew 
the situation described in statements (1) and (2), using a general method similar 
to the one we employ in this article. This article should therefore be viewed as 
an extension of Zarach's results, particularly to the case of the Los and Gaifman 
theorems, which we find interesting because these theorems are extensively used in 
the context of set theory without power set. 

Although the failure of such properties as we mention above is often thought 
to revolve around the axiom of choice — there are after all some famous models 
of ZF + -iAC in which w\ is singular and the Los theorem fails — our arguments 
reveal instead a separate issue arising from the inequivalence without the power 
set axiom of the replacement and collection axiom schemes. In particular, all our 
counterexample models will satisfy the axiom of choice in any of the usual set for- 
mulations, including the existence of choice-functions, Zorn's lemma, and Zermelo's 
well-ordering principle. 

Although the failure of the Los and Gaifman theorems for models of ZFC- might 
seem troubling — these theorems are fundamental in the theory of ultrapowers and 
iterated ultrapowers, where the use of models of set theory without the power set 
axiom is pervasive — nevertheless all is well with these applications, for the following 
reason. Namely, all of the problematic issues identified in this article for the theory 
ZFC- disappear if one should simply strengthen it to the theory ZFC - , which is 
axiomatized by the same list of axioms as in the opening of this article where choice 
is taken to mean that every set can be well-ordered, but the replacement scheme is 
replaced by the collection scheme. 3 In particular, the reader can readily check that 
ZFC - suffices to prove that successor cardinals are regular, and models of ZFC - 
satisfy the Los theorem and the Gaifman theorem and so on. The somewhat higher 
minus sign shall serve to remind the reader that the theory ZFC - is stronger than 
ZFC-, and it is this stronger version of the theory that holds in all applications of 
ZFC without power set of which we are aware. For example, if n is an uncountable 
regular cardinal, then H K is easily seen to satisfy the collection scheme and hence 
full ZFC - ; also, any model of ZFC- with the global choice axiom, in the form 
of a global class well-ordering of the universe, must also satisfy ZFC - , since the 
global choice class allows us to transform instances of collection into instances of 
replacement, by picking the least witness, and thereby satisfy them. Thus, in all the 
uses of models of set theory without power set of which we are aware, one actually 
has the stronger theory ZFC - anyway, and thereby avoids the problematic issues 
of ZFC- that we identify in this article. 

The main point of this paper, therefore, is to reveal what can go wrong when 
one naively uses ZFC- in a set-theoretic argument for which one should really be 



J We believe the choice axiom in ZFC~ should refer to Zermelo's well-ordering principle, since 
in the context of set theory without power set the existence of choice-functions does not suffice to 
prove that every set can be well-ordered, even if the collection axiom scheme holds (see [Zar82]). 
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using ZFC~, and to point out that if one indeed would use ZFC~, then all standard 
arguments carry through as expected. In other words, our point is that ZFC- is the 
wrong theory, and in almost all applications, set theorists should be using ZFC~ 
instead. 

Before continuing, perhaps it would be helpful for us to point out where in the 
usual arguments that we have mentioned one uses collection rather than merely 
replacement. For example, when proving that oj\ is regular, or more generally 
when proving that the countable union of countable sets is countable, one has a 
countable sequence (X n \ n < uj) of countable sets X n . One would like to use the 
axiom of choice to select witnessing bijections f n :uj = X n and then, with a pairing 
function on u>, use the map (n, k) i-> f n (k) to map uj surjectively onto \J n X n . The 
problem with carrying out this argument in ZFC- is that in order to apply the 
axiom of choice in the first place, we would need to have a sequence (F n \ n < u>) 
of nonempty sets F n consisting of bijections / : lj = X n to which to apply it. 
Without the power set axiom, however, we do not know that the collection of all 
bijections from lo to X n forms a set, and so we somehow need first to reduce to 
a set of witnesses before applying AC to choose individual witnesses. Thus, we 
would seem to want the collection scheme, which would exactly allow us to do that, 
and so the argument does work in ZFC - . A similar issue arises when proving that 
successor cardinals n + are regular. The results of this paper show that with only 
replacement, one simply cannot push the argument through. 

A similar issue arises when proving the Los theorem in the forward direction 
of the existential case. One has the ultrapower j : M — > Ult(M, /i) and M \= 
3x tp(x, f(a)) for ^-almost every a, where the ultrapower is constructed using func- 
tions in M. What one would like to do is to apply the axiom of choice in order to 
select a witness x a such that M \= tp(x a , f(a)), for each a for which there is such 
a witness. But in order to apply the axiom of choice here, one must first know that 
there is a set of witnesses x such that ip(x, f(a j) from which to choose, which may 
be accomplished using collection. But without collection, it follows by our results 
that the argument simply cannot succeed. Note that replacement in M suffices to 
prove the Los theorem for A -formulas since if there is a function g G M such that 
M \= 3xGg(a) ip(x, f(a j) for ^-almost every a, then the witnesses can be chosen 
out of ljran(.g), which is a set by replacement. Since ultrapower embeddings of 
models of ZFC- are cofinal 4 by replacement, it follows that they are always El- 
elementary. We will produce a model of ZFC- with an ultrapower embedding that 
is not E 2 -elementary and for which the Los theorem fails already for Ei-formulas. 
This will also demonstrate a failure of the Gaifman theorem. 

In its full generality, the Gaifman theorem [Gai74] states that if M \= ZFC - 
and j : M — > N is a A -elementary cofinal map, then j is fully elementary. 5 No 
additional assumptions are made on N, and the models M and N need not be 
transitive. It is easy to see that N satisfies the pairing axiom, since if x, y are any 
elements in N, then by cofinality there are a,b G M such that x G j(a) and y G j(b), 
and so, by replacement in M, there is the cartesian product C = a x b so that 

4 An embedding j : M — > N is cofinal if every x £ V is an element of j(y) for some y £ M . 

5 In Gaifman's original formulation, the theorem stated that if M is a model of Zermelo's set 
theory (ZF axioms with the separation scheme but no replacement scheme), and j : M — > N is 
a Ao-elementary cofinal map, then it is fully elementary. Gaifman, then pointed out that the 
existence of cartesian products in M suffices in the place of power sets, and thus, in our context, 
the theorem holds if M |= ZFC~. 
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M \= \/u£aVv£b3w<EC w=(u, v), which is a Ao-formula. It follows that, in both M 
and N, blocks of like quantifiers in formulas may be contracted to a single quantifier 
through applications of the pairing axiom. The proof now proceeds by induction on 
the complexity of formulas, and since j is FJi-elementary by cofinality, the critical 
case of the induction occurs when j is assumed to be E„-elementary for some n > 
and M |= Vx G a Ely <p(x,y,p) for some formula ip G II„„i and some sets a,p G M. 
Using collection in M, there is a set b such that M |= VxGa 3yGb<p(x, y,p), and since 
a x b exists in M, one may use separation in M to obtain a set C such that M satisfies 
VxGa3?/G& (x, y) G C and VxGaVj/G& [(x, y) G C => ^(x, . The first statement 
is FJ , and the second is II n _i, so that both statements transfer to N by the inductive 
hypothesis. It follows that N \= VxGj( a ) 3yGj(^) <fi(x, y, j(p)), completing the proof 
of the critical case. 6 We shall show that the use of collection in M is essential to this 
argument by producing a cofinal Ao-elementary map j : M —> N of ZFC- models 
that is not elementary. 

An analogous issue as in the Los theorem arises when proving that for a given 
elementary embedding j : M — > N and some S C (J j " M the seed hull of S via 
j, meaning the structure X5 = {j(f)(s) \ s G [5] <w ,/ G M}, is an elementary 
submodel of N. This is usually shown by verifying the Tarski-Vaught test for 
Xs Q N, and so one has that N \= 3y ip(y, j(f)(s)) where s G j(D) for some 
D G M. One would like to use a Skolem function j£M for <p{y, f{x)), meaning 
that for each x G D, one lets g(x) be any witness y such that ip(y, /(#)) holds in M, 
if such a witness exists. But, the usual proof that such g exists in M uses collection 
in M, since one can appeal to AC in M to choose witnesses only after sufficiently 
many such witnesses have been collected to a set in M. This shows that X5 -< N 
in the case when M \= ZFC - , but in our context, when M \= ZFC-, we will find 
elementary embeddings j : M — >• N and sets S of seeds such that -fi _/V. Note 
that replacement in M suffices to see that X5 is A -elementary in N, since in this 
case the existential quantifier in the Tarski-Vaught test may be bounded by some 
j(h)(s) and therefore the witnesses for the Skolem function g G M can be chosen 
out of |Jran(/i). The map j : M — > X5 is thus cofinal and hence Si -elementary, 
but not fully elementary, and so is the map tt o j : M — > ran(7r), where 7r denotes 
the Mostowski collapse of X5, which means that both maps demonstrate a failure 
of the Gaifman theorem. Moreover, our maps will allow for seed hulls X5 that are 
not generated by a single seed, so that we will get these failures for embeddings 
that are not ultrapower maps. 

2. Badly behaved models of ZFC- 

Let us now begin our project by describing a variety of models of ZFC-, in each 
case making observations about how that model reveals a compatibility of various 
undesirable behaviors with the theory ZFC-. Although there is some redundancy 
in this bad behavior of the models in that several different example models reveal 
the same deficiency in ZFC-, we have nevertheless included all the examples to 
illustrate the range and flexibility of the constructions. We shall organize our 
presentation principally around the construction methods, rather than around the 
various undesirable behavior for models of ZFC-. 

6 The proof of Gaifman's result becomes a much easier induction on the complexity of formulas, 
if one assumes at the outset that N is a model of ZFC - , and this folklore version of the theorem 
was already known before Gaifman's result according to [Gai74]. 
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2.1. The Levy collapse of H w . Let Coll(u;, <H W ) be the Levy collapse of K w , mean- 
ing the finite-support product fl„ Coll(w, H„), and suppose that G C Coll(u;, <H W ) 
is V-generic. The cardinal H w is collapsed to to in V[G], but it remains a cardinal 
in every model V^[G n ], where G„ = G R P n is the restriction of G to the collapse 
forcing P„ = IIfc<„ Co11(cj, K^) which proceeds only up to H„. Our desired model is 

W= (J V[G„], 

n<cj 

which is the union of the forcing extensions V[G n ] arising during initial segments 
of the collapse. The model W is a definable class in V[G] using a parameter 
from V determined by Coll(w, <H W ) to define the ground model V (by a result 
of Laver's [Lav07]) and the filter G. Although the definability of W will not be 
required for this argument, it will be used in the later constructions. Note that 
W depends not only on T^[G], but also on the way that G is presented, and there 
are automorphisms of the forcing that do not preserve W 7 Nevertheless, any 
automorphism of any particular P„ induces an automorphism of P that preserves 
W. Note that every stage m of the forcing has for any two conditions with the same 
domain, an automorphism generated by mapping one to the other, and combining 
these automorphisms for m < n produces automorphisms of P„ that will be used 
later in the argument. 

Let us now verify that W \= ZFC-, by checking each axiom in turn. Most of 
them follow easily. For example, extensionality and foundation hold in W, because 
it uses the G-rclation of V[G] and is transitive; union and pairing hold since W is 
the union of a chain of models of ZFC, which each have the required union and 
pairing sets; infinity holds since weFC W; and Zermelo's well-ordering principle 
holds in W, because every set in W is in some V[G„], where it has a well-order 
that survives into W; and separation follows from replacement, and so needn't be 
considered separately. 

So it remains to verify only the replacement axiom scheme in W. Suppose that 
A and z are sets in W, and that W |= Va£A3lbip(a, b, z), where the exclamation 
point expresses that there is a unique such b. We may assume without loss of 
generality that A, z £ V, since otherwise we have A, z £ ^[G„] for some n and we 
may replace V with V = V[G n ], using the fact that forcing with the tail of the 
product gives rise to the same W. We claim next that for any a £ A, the unique 
witness b for a is also in V . Fix any a £ A, and let b be the unique witness such that 
W \= ip(a, b, z). It must be that b £ V[G n ] for some n, and so b = be for some P„- 
name b. Note that we specifically chose a P„-name to ensure that its interpretation 
by any generic G will end up in t^[G„], a circumstance crucial to the later part of 
the argument. Suppose that some condition p £ G forces ip w (a,b, z), where W is 
the forcing language definition of the class W using the canonical name G for the 
generic filter. Note that the stage n + 1 forcing Coll(w, H n+ i) is isomorphic to the 
product P„ x Coll((x>, K„ + i), and so we may view the stage n + 1 forcing as first 
adding another mutually generic filter G„ C P„ and then performing the rest of the 

7 For example, one could view each stage of the forcing as also adding a Cohen generic real 
via an isomorphism of P n with the product of ¥ n and the Cohen poset, and then consider an 
automorphism in which the sequence of these reals is added before the first collapsing stage via an 
isomorphism of Coll(w, <H„) with the countable product of Cohen posets and Coll(o;, <N [J ), so 
that for one generic filter, the sequence is not in W, but for the automorphic copy of the generic 
filter, it is. 
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forcing. That is, P is isomorphic to the forcing that forces with two copies of P„, 
first using the actual copy and then using an additional copy, before the product 
proceeds with stage n + 1 and the rest. By swapping these two copies of P„ inside 
P„+i, we produce a slightly different V- generic filter G, such that G„ and G n are 
mutually generic for P„, but V[G] = V[G]. Since we are rearranging the filter only 
within P„+i, it follows that Wq — Wq. We may furthermore assume without loss 
of generality that p£ G, by applying if necessary an additional automorphism (as 
described above) to the second copy of P„ that we constructed in P„+i, before 
we perform the swap of the two copies of P„. It follows that ip w (a, 1>q 1 z), and so 
by the uniqueness of b, we have b = bo = b^. This equation implies that b is in 
^[G„] n y[G„], which is equal to V since these filters are mutually generic, by a 
result of Solovay [Sol70]. Thus, b G V as we claimed. Now, for any given a £ A the 
question of whether a given b £ V has (p w (a, b, z) must be decided by 1, since P is 
almost homogeneous by automorphisms (as described above) affecting only finitely 
many coordinates and such automorphisms do not affect the value of W. s Thus, the 
set { b 3aeALp w (a, b, z) } exists in V by replacement in V, and hence also exists 
in W as desired. This completes the argument that W is a model of replacement, 
and so W \= ZFC-. 

We shall now make further observations about this model W in order to prove 
that ZFC- is consistent with various undesirable behaviors. The first few observa- 
tions were made already by Zarach [Zar96] , using a method fundamentally similar 
to ours. In the subsequent sections, we shall modify this construction in order to 
obtain failures of the Los and Gaifman theorems, among others. 

Theorem 1 (Zarach). It is consistent with ZFC- that wi exists but is singular and 
hence that a countable union of countable sets can be uncountable. 

Proof. Consider the model W as constructed in the Levy collapse of H w above. Note 
that every cardinal ^ is collapsed in F[G„] and hence in W, but remains a 
cardinal in every V[G„] and hence also in W. Thus, ujY — H^, which has cofinality 
u> in V and hence in W, as witnessed by the sequence (tt„ | n < u>) 6 V C W. So 
W satisfies that lo\ is singular. In particular, W satisfies that uj\ is a countable 
union of countable sets, as = (J{ | n E uj }. □ 

Theorem 2 (Zarach). It is consistent with ZFC- that the collection scheme fails. 
Hence, replacement and collection are not equivalent without the power set axiom. 

Proof. The collection scheme fails in the model W above because for each countable 
ordinal a in W there is a surjective function / : w -» a, but there is no set B 
in W collecting a family of such functions, since every B in W arises in some 
y[G n ] and therefore contains no functions collapsing the ordinals a in the interval 

K+i,K)- □ 

In the proof above, we could have also obtained a violation of collection using 
domain ui instead of u)\ by considering the sequence (H^ n < w), which is an 
element of V and hence of W, and observing that W has bijections / : w K„, 
but a family of such functions cannot be collected. 

forcing P is almost homogeneous if for any two conditions p and q there is an automorphism 
7r of P such that n(p) is compatible with q. Since 7t([v(t)]) = [v?( 7 " lr ) ], where r n is the name 
produced by hereditary application of n, it follows for such forcing that the Boolean value of any 
statement whose parameters are not affected by it is cither or 1. 
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Theorem 3 (Zarach). It is consistent with ZFC- that every set of reals is countable, 
yet wi exists. 

Proof. Consider the model W constructed as above but starting with a ground 
model V in which 2 <N ^ = H u . Every set of reals in such a W is in V[G„] for some 
n, and the reals of this model have size H m for some m by a nice name counting 
argument and the assumption 2 <N " = N w . Thus, the reals of every F[G„] become 
countable in some further V[G m ] and hence in W, so every set of reals in W is 
countable in W. But W satisfies that uii exists and indeed H Q exists for every 
ordinal a, since above H w the cardinals of W agree with the cardinals of V. □ 

The construction is general, and it adapts to forcing with the Levy collapse of 
H K to k, meaning the bounded-support product Coll(/t, <K re ) = Il ( g <K Coll(/t, H^). 
If G 7 = G fl P 7 , where P 7 = L T / 3< 7 Co11(k, H^) is the forcing up to 7, then let 
W = U 7 <« ^[G 7 ]- As long as k is a regular cardinal with < H K for all (3 < k, 
it follows by essentially the same arguments as before that W satisfies ZFC- but 
not collection, and that the cardinal n + exists in W but has cofinality n there. 
Moreover, the model W is closed in V[G] under sequences of length less than k, 
so this construction provides a general method for obtaining badly behaved inner 
models W \= ZFC- that are as closed as desired. 

As we did in this section, we will start many arguments in this article with a 
model V of ZFC and produce a model of the desired theory with ZFC- by finding 
an inner model of a forcing extension of V. By the usual forcing methods, such as 
taking a quotient of a Boolean- valued model, these arguments show that if ZFC is 
consistent, then so is ZFC- with the stated extra properties. One can omit the need 
for this consistency assumption and prove in ZFC alone that there are transitive 
models of ZFC- with the desired properties, simply by forcing over a suitably large 
Hg+ rather than V itself. For example, one could first make a countable elementary 
submodel of such an Hg+, and then build the generic extension by meeting the 
countably many dense sets. We carry out several such arguments in section §2.7. 
In any case we find the models W obtained by forcing over models of ZFC to be 
more striking, since they have V as an inner model, and for example also satisfy 
Hartogs' theorem that for every ordinal a, the cardinal H Q exists, and many other 
attractive properties. 

2.2. Pumping up the continuum. In the next example, we shall force to pump 
up the continuum instead of forcing to collapse cardinals as in the previous example. 
Let us start in a model V of ZFC in which 2" < N w , and let G C Add(w, N w ) be V- 
generic for the forcing to add H w -many Cohen reals. Let W = {J n<LU V[G n ], where 
G n = G H Add(w, H„) is the initial segment of the forcing adding only H„-many 
Cohen reals. We argue that W \= ZFC-. Once again, most of the axioms are easy to 
verify, since W is the union of an increasing chain of transitive ZFC models V[G„]. 
It is non-trivial to verify only replacement, which we handle by a similar argument 
as above. Namely, suppose that A,zGW and W \= Vae^4 3lb tp(a, b, z). As before, 
we assume that A, z € V, since otherwise they are in some V[Gfc], which we may 
regard as the new ground model. For each a G A, we claim again that the witness b 
for which <p w (a, b, z) must be in V. In any case b <G V[G n ] for some n, and so there 
is some P n -name b with b = be and a condition p € G with p lh (f w (a, b, z). We 
may view the forcing to add G as consisting of first adding K„-many Cohen reals, 
and then adding H„-many more Cohen reals, and then adding the rest of them, 
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since this is an isomorphic presentation of the forcing. By using the automorphism 
that swaps these two mutually generic blocks of H„-many Cohen reals, we may 
rearrange the filter G to construct another filter G for which V[G] = V[G], but 
y[G„] and F[G„] are mutually generic extensions by Add(w, H„), while still having 
Wq — Wq. As before, we may also apply an additional automorphism to the 
second copy of Add(w, H„) if necessary when constructing G and assume without 
loss of generality that p s G. It follows that W \= ip(a,bg,z), and consequently, 
by the uniqueness of b, that b — ba — b^. Thus, b lies in both V[G n ] and V[G~ n ], 
but the intersection of these models is V by mutual genericity, and so b € V, as we 
claimed. To complete the argument, observe that since P is almost homogeneous 
by automorphisms not affecting W, we have that for any given a € A the question 
of whether a given b G V has ip w (a, b, z) must be decided by 1. So we may in V 
build the set {b\ 3a&A ip w (a, b, z) } by using replacement in V. So this set exists 
in W, and we have verified the replacement scheme in W. 

Theorem 4. It is consistent with ZFC- that H w exists and for each n there are 
sets of reals of size H„ ; but no set of reals of size H w . In particular, there is no set 
of reals of largest cardinality, and this violates the collection scheme. 

Proof. Consider the model W we just constructed and recall that we assumed 
2" < H w in the ground model V. Since the forcing Add(w, N w ) has the countable 
chain condition, it preserves all cardinals to V[G] and hence also to W. The reals 
of V[G„] exist in W and have size at least H„ there; hence W has sets of reals of 
size exactly H„ by Zermelo's well-ordering principle. But every set of reals in W is 
in V[G m ] for some m < uj and hence must have size less than N w . □ 

As in the previous section, the construction here is also quite general, and it 
adapts easily in order to produce models W of ZFC- that violate collection but 
are highly closed in the overall forcing extension V[G]. For example, if k is any 
regular cardinal with 2" < H K and G C Add(u;,K K ) is ^-generic for the forcing to 
add H K -many Cohen reals, then let W = U 7 < K ^[G 7 ], where G 7 = Gn Add(w, H 7 ). 
It follows essentially by the same arguments as before that W satisfies ZFC- but 
not collection, and that W has sets of reals of size H 7 for each 7 < k, but no set 
of reals of size H K . Moreover, the model W is closed under sequences of length less 
than k in V[G]. Other generalizations are possible also, and we could have instead 
added subsets to u>i or 102 or to any cardinal n, and made similar conclusions. 

Let us now consider a natural strengthening of both collection and replacement. 
The reflection principle scheme is the assertion of any formula ip, that for any given 
set x there is a transitive set A containing subset such that ip is absolute 

between A and the universe. The reflection principle scheme is provable in ZFC by 
appealing to the von Neumann V a hierarchy which does not exist when the power 
set axiom fails. The reflection principle scheme implies the collection axiom scheme 
directly, and in the presence of separation, it also implies the replacement axiom 
scheme. Failure of collection therefore implies the failure of the reflection principle 
scheme, as in the previously constructed models W of ZFC-. It is an interesting 
open question whether the reflection principle scheme is provable in ZFC - . We 
suspect, just as Zarach does in [Zar96], that it is not. 

The reflection principle scheme is, over ZFC - , equivalent to a version of the 
axiom of choice that we call the dependent choice scheme, which is the natural class 
version of Tarski's principle of dependent choices for definable relations. Specifically, 



10 VICTORIA GITMAN, JOEL DAVID HAMKINS, AND THOMAS A. JOHNSTONE 

the DC-scheme asserts of any formula ip, that for any parameter z, if for every x 
there is y with ip(x,y,z), then there is an w-sequence (x n | n < u>) such that 
\/nip{x n ,x n+ \, z). In other words, if ip defines a relation having no terminal nodes, 
then we can make w-many dependent choices to find an w-path through this relation. 
The reflection principle scheme implies the DC-scheme, since it reduces instances 
of the DC-scheme to set instances of DC, which then follow from AC. Conversely, 
to obtain reflection for a particular formula ip from the DC-scheme, we first use 
collection to see that any given set x can be extended to a transitive set containing 
existential witnesses for all subformulas of ip with parameters from x, and then we 
use the DC-scheme to chose an w-path of such extensions. The next theorem shows 
that the use of collection when proving this converse direction is essential. 

Theorem 5 (Zarach). It is consistent with ZFC- that the DC-scheme holds, but 
the reflection principle scheme fails. 

Proof. Suppose that 2" < K Wl and that G C Add(w,H Wl ) is the forcing to add 
H Wl -many Cohen reals. If W = U 7<Wl V[G 7 ] where G 7 = G n Add(w,K 7 ), then 
as we discussed earlier in this section, W satisfies ZFC- but not collection and is 
closed under countable sequences in V[G]. The DC-scheme holds in W, since it 
holds in V[G] and W is a definable class with C W in V[G]. However, the 
reflection principle scheme fails in W, since collection does. □ 

For any infinite cardinal k, Levy [Lev64] introduced the principle DC K , which is 
the assertion that for any set A and any binary set relation R, if for each sequence 
s G A <K there is a y e A such that s is i?-related to y, then there is a K-sequence 
(x£ | £ < k) such that for each a < n the initial sequence {x$ | £ < a) is i?-related to 
x a . This natural generalization of Tarski's principle of dependent choices allows for 
K-many dependent choices, rather than just w-many, and it is easy to see that DC U 
is equivalent to the usual principle of dependent choices. Jech showed in [Jec66] 
that it is relatively consistent with ZF that DC a holds for all a below any given 
regular n but DC K fails. 

In our context, namely in the theory ZFC- where every set can be well-ordered, 
we consider the natural class version of DC K , namely the principle that we call 
the DC K -scheme, which asserts of any formula ip that for any parameter z, if for 
every x there is y with <p(x,y, z), then there is a function / with domain n such 
that V£<k ip(f /(£), z). It is easy to see that the DCoj-schcmc is equivalent over 
ZFC- to the DC-scheme. The reflection principle scheme implies the DC K -scheme 
for all cardinals k, since it reduces it to set instances of DC K , which then follow 
from AC. But, as the next theorem shows, under ZFC- the DC K -scheme is not 
strong enough to prove the reflection principle scheme, or DCa if A > k. 

Theorem 6. Suppose that k is any regular cardinal with 2" < H K and that G C 
Add(w,H K ) is V -generic. If W — U 7<K v [G-y] where G 7 = G n Add(u;,K 7 ), then 
W |= ZFC- has the same cardinals as V and the DC a -scheme holds in W for all 
a < k, but the ~DC K -scheme and the reflection principle scheme fail. In particular, 
it is consistent with ZFC- that the DC-scheme fails. 

Proof. As we discussed earlier in this section, W is a model of ZFC- but not 
collection, it has sets of reals of size H 7 for each 7 < n, but no set of reals of size 
H K , and W <K C W. Using the chain condition, W and V have the same cardinals. 
Thus, for each a < n, the DC Q -scheme holds in W, but the reflection principle 
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scheme fails. To see that W does not satisfy the DC K -scheme, let <p(x, y) assert 
that y is an infinite set of reals, and if x is any sequence of sets of reals, then 
| {Jx\ < \y\. Because there are increasingly large sets of reals in W, it follows that 
for each sequence s <E W <K of sets of reals there is a y £ W such that ip(s, y) holds 
in W . But there is no K-path through this relation in W, because the union of 
any such sequence would be a set of reals in W of size at least H K , a contradiction. 
Lastly note that if k = ui, the DC-scheme fails. □ 

Zarach showed already in [Zar96] that there is a model of ZFC- in which the 
DC-scheme fails. He also showed that over ZFC-, the scheme Va DC Q implies the 
collection scheme and therefore, if collection fails then there must be a cardinal k 
such that DC K fails as well. 

2.3. The Levy collapse of an inaccessible cardinal. Suppose now that k is an 
inaccessible cardinal and that G is ^-generic for the Levy collapse of k, meaning 
the finite-support product Co11(cj, <k) = L T ( g <K Co11(cj, Let W — \J 1<K V[Gj], 
where G 7 = GnP 7 , where P 7 = ng< 7 Coll(w, H^) is the forcing up to H 7 . Note that 
W <K C W. The argument that W |= ZFC- is identical to those previously given 
and relies on the fact that Co\\{u, N 7 +i) may be viewed via forcing equivalence as 
first performing another copy of P 7 = II ( g< 7 Co11(cj, K^), and then performing the 
rest of the collapse. 

The model W possesses another interesting feature. Note that the filter G 7 is 
coded by a real in V[G], and every real of V[G] appears in some y[G 7 ]. So an 
equivalent description of W in V[G] is as the union W = Ureit^M ( wnere V[r] 
denotes the closure of V and r under the Godel operations). 

Theorem 7. Relative to an inaccessible cardinal, it is consistent with ZFC- that 
UJi exists and is regular, but every set of reals is countable, which implies that the 
collection scheme fails. 

Proof. Consider the model W as constructed just previously. The cardinal k be- 
comes u)i in V[G] and hence also in W, and remains regular there. Every set of 
reals in W is in V[G 7 ] for some 7 < n, and becomes countable at a later stage and 
hence countable in W. This implies that the collection scheme fails in W, because 
for each countable ordinal a, there is a function / : uj = a, but there is no set 
containing such functions for every a, since from such a set we could construct in 
W an uncountable set of reals. □ 

To see the failure of collection in the proof of theorem 7, it was crucial that 
every set of reals was countable. Indeed, one of Zarach's results on unintuitive 
consequences of set theory without power set shows that it is relatively consistent 
with ZFC - that Hartogs' theorem holds, but there are unboundedly many cardinals 
whose powersets are proper classes with all subsets of a certain bounded size. For 
example, he provides in [Zar82] a model of ZFC~ for which H Q exists for each 
ordinal a, where P(ui) is a proper class, but every set of reals has size at most ui\. 

Note also that if W \= ZFC- is a model of Hartogs' theorem in which uj\ exists 
and is regular and every set of reals is countable, then uji is inaccessible in L w |= 
ZFC, and indeed, is inaccessible to reals, for otherwise we would find an uncountable 
set of reals in some L[a;] w , which would remain uncountable in W. So the use of 
the inaccessible cardinal is necessary for any construction that obtains W as above. 
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2.4. The Levy collapse of a measurable cardinal. Let us now turn to a version 
of the construction providing a violation of the Los theorem. Namely, in theorem 
8 we show that in the Levy collapse V[G] of a measurable cardinal k, the inner 
model W as constructed in section §2.3 has a definable ultrafilter /j,* on k = wj^ 6 ', 
whose ultrapower is well-founded, but the ultrapower map is not elementary. Thus, 
it is relatively consistent with ZFC- that this version of the Los theorem fails 
for ultrapowers, where the ultrafilter is fully amenable to the model and indeed 
definable over the model and the ultrapower is well-founded. Furthermore, we 
show that the Gaifman theorem fails for this ultrapower embedding, since it is 
£i -elementary and cofinal, but not fully elementary. 

Theorem 8. If V[G] is the forcing extension by the Levy collapse G C Coll(w, <n) 
of a measurable cardinal k and W = \J 7<K V[G 7 ], where G 7 = G D P 7 and 
P 7 = IL3< 7 Coll(w, Kp), then: 

(1) W \= ZFC-. 

(2) W <K C W in V[G]. 

(3) In W there is a definable W -normal measure ji* on k. 

(4) The ultrapower M = Ult^, /i*) taken in V[G] using functions on k in W 
is well-founded and M \= ZFC-. 

(5) The class M and the ultrapower map are definable in W. 

(6) The Los theorem fails for this ultrapower at the Hi-level. 

(7) The Gaifman theorem fails for the ultrapower map j :W — > M, since it is 
Si- elementary and cofinal, but not £2- elementary. 

Proof. We already observed in section §2.3 that W \= ZFC- but not collection, 
and that W <K C W. Let /x be any normal measure on k in V. Note that every 
initial segment P 7 of the forcing is small relative to n. Thus, by the Levy-Solovay 
theorem [LS67] it follows that k remains measurable in F[G 7 ], and indeed, the filter 
/x 7 generated by /i in T^[G 7 ] is a normal measure on k in T^[G 7 ]. Let /x* be the filter 
on k generated by fi in W, which is the same as (J it 7 . Note that fi* is not in W, 
since it is not in any V^[G 7 ], but it is definable over W from parameter /x, since 
a set is in fx* if and only if it covers an element of /x. In fact, zx* is a VF-normal 
measure on k, since every subset of k in W is in some V[G 7 ] and hence is measured 
by ix 7 , and every regressive function on n in W is in some V^[G 7 ] and hence is 
constant on a /x 7 -large set there. Moreover, the measure /x* is countably complete 
in V[G] since W contains all its w-sequences from V[G]. We can construct in V[G], 
since W is definable there, the ultrapower Ult(14 7 , fi*) using functions on k in W. 
Since /x* is countably complete, it follows by the usual argument that Ult(W / , //*) 
is well-founded, and thus, we can Mostowski collapse it to obtain the ultrapower 
map j : W — > M. In fact, we can both construct and collapse the ultrapower in 
W itself, though this is not immediately obvious as Scott's trick that is crucial to 
this process may fail in the absence of power sets (see our remark after the proof). 
Note that the ultrapower map j is Ei-elementary and cofinal, by our remarks in 
the introduction of this article. 

Since the forcing P 7 for 7 < k is small relative to k, it follows that the ultra- 
power map jo : V — > M by /x in V lifts uniquely to an elementary embedding 
j 7 : V[G 7 ] — > M[G 7 ], which necessarily equals the ultrapower map by /x 7 in V[G 7 ]. 
In fact, whenever 7 < 5 are ordinals below k, then js \ V[G 7 ] = j 7 , since when 
we lift the ultrapower j 7 to F[G^] we obtain by the smallness of the corresponding 
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forcing precisely the ultrapower by /is, which is the same as js- The union U 7 < re i7 
is thus a well-defined map. We claim that j = U 7<K i 7 anci M — U 7 < K M[G 7 ] via 
the isomorphism [/] M i— > [/] M * whenever /:«;—> V[G 7 ] is a function in V[G 7 ]. 
This map is well-defined and e-preserving since = j 7 (/)(«) = J* (/)(«) = 
whenever 7 < 5 and [/J^ € M[G 7 ]. The map is clearly onto, and it follows that 
[/] Mt = [/]^ whenever [f]^ e M[G 7 ]. It follows that M |= ZFC-, since it is 
obtained from M by the Levy collapse of k in the manner of section §2.3. 

Since k is an uncountable cardinal in W and M C W, it follows that k is an 
uncountable cardinal in M. Thus, although k = wf, it cannot be that = 
ujf 1 , since k itself is an uncountable cardinal strictly below j(n) in M. Thus j 
is not elementary, and so the Los theorem fails for the ultrapower Ult(W, 
Specifically, the map j is not E2-elementary, since the assertion "k = u>i" has 
complexity n 2 . Even without any prior knowledge about the precise structure of 
the ultrapower Ult(W, fi*) and its transitive collapse M, one can argue using the 
violation of collection that j is not £2 -elementary, and that, indeed, Los fails already 
for Ei-formulas. Recall that for all a < n, the model W has surjections / : oj -» a, 
but there cannot be a set in W collecting a family of such functions. Now to see 
that Los fails for Si-formulas, observe that in the ultrapower there cannot exist a 
surjection from [c w ] = u> onto [id] = k, since otherwise, if [g] : [c w ] -» [id] were such 
a surjection, then {a < k \ g(a) is a surjection from oj onto a} would be a set in n* 
(by the Los theorem for A -formulas), and so there would be a collecting set in W . 
If j were S 2 -elementary, the ultrapower would have for all a < a surjection 

from lo onto a, and hence a surjection from co onto k. □ 

Before continuing, let us remark on some subtle issues concerning the extent to 
which one can view the ultrapower of a ZFC- or even a ZFCP model as an internal 
construction inside such a model. One issue is that even in the case that a measure 
v is definable in or perhaps even an element of a ZFC~ model M, then although 
one can define in M the fundamental relations = v and e u used to construct the 
ultrapower Ult(M, v), one seems unable in general to find representing sets in a de- 
finable way for the equivalence classes. Each equivalence class is, after all, a proper 
class in M, an issue usually resolved in the ZFC context by means of Scott's trick, 
where one restricts to the set of minimal-rank representatives in each equivalence 
class; but Scott's trick doesn't succeed in the ZFC- or ZFC~ contexts, because the 
collection of minimal-rank representatives from a class may still not be a set, when 
one lacks the power set axiom. Thus, one seems to have difficulty performing the 
quotient operation, defining the ultrapower quotient structure as a first-order class 
model. Thus, if one wants to construct the ultrapower internally, it seems that one 
may be forced always to deal only with the pre-quotient structure, where one has 
only the equivalence relation =„ rather than a true equality = relation as in the 
quotient. A greater difficulty is that even if one should be able definably to find 
a representing set for each equivalence class, and thereby have a quotient repre- 
sentation of the ultrapower as a first-order class, one cannot necessarily perform 
the Mostowski collapse, even when the ultrapower is well-founded, because the 
relation on those classes is not necessarily set-like in M. In fact, even a model of 
ZFC - containing a measurable cardinal is not always able to construct the ultra- 
power and take its Mostowski collapse. For an explicit example of this, suppose 
that k is a measurable cardinal and fix an elementary embedding j : V — > M by 



14 VICTORIA GITMAN, JOEL DAVID HAMKINS, AND THOMAS A. JOHNSTONE 

a normal measure /jonc and a strong limit cardinal A of cofinality k. It follows 
that A+ < j(X), since M is correct about K A. Consider H\+, which is a model of 
ZFC - containing /i and all functions f : k —> H\+ . The collapsed ultrapower of 
H\+ by /j,, therefore, is the same as the restriction j : H x + — > which is 

not a subset of H x + since contains ordinals above A + . Thus, even though 

H\+ sees that /i is a measure on k, and is able to define the ultrapower relations 
and observe correctly that the ultrapower is well-founded, it is not able to perform 
the Mostowski collapse of this structure, since it lacks sufficient ordinals to do so. 
One way to describe the situation is that H\+ does not agree that a cardinal n is 
measurable (in the sense of having a K-complete nonprincipal ultrafilter on k) if 
and only if there is an ultrapower embedding of the universe into a transitive class. 
So the equivalence of these two characterizations of measurability is not provable 
in ZFC". 

Nevertheless, we can overcome these issues in the case of the model W and the 
measure ji* that we construct in the proof of theorem 2.4. In particular, let us 
argue that both the Mostowski collapse M of Ult(W, p,*) and the corresponding 
ultrapower map j : W — > M of that proof are definable classes in W. As we 
observed in the proof, for any 7 < k, the Mostowski collapse of [/] in XJ\t(W,p*) 
is the same as the Mostowski collapse of [/] in \J\t(V[G 7 ], pj). It follows that 
every function g : k — > V^[G 7 ] in W is equivalent on a set in p to a function 
g' '. k — y V[G-y] with g' G V[G 7 ]. This means that we can compute in W the 
image of the Mostowski collapse of [/] in XJlt(W, /j,*) by performing the collapse 
inside Vg[G 7 ] for large enough 0. Indeed, all that is needed is a sufficiently large 
transitive set A, such that / G A and for any function g G VF having g G M * h G A 
for some function h, then there is g' e A with g = M * g' . In this case, one shows 
that the Mostowski collapse of [/] in Ult(W, is the same as the collapse of [/] 
in (A, G AI *)/= M ». Since there are abundant such A in W, such as A = Ve[G 7 ] for 
any sufficiently large 6, and they all give rise to the same value for the Mostowski 
collapse of [/], it follows that in W we may definably associate any function / to 
its image under the Mostowski collapse of Ult(M / , /i*). Thus, M is a definable class 
in W, and by considering the constant functions, we may also thereby define the 
ultrapower map j : W — > M. 

Let us now turn to the Levy hierarchy of formulas in the language of set theory, 
where S„-formulas and n„-formulas are defined as usual in a purely syntactical 
way. Recall that if a formula ip is obtained by bounded quantification over some 
S„-formula, then there exists another £„-formula ip' that is provably equivalent in 
ZFC to ip. The standard proof of this fact uses repeated applications of collection 
and the pairing axiom, and so it follows that the equivalence between ip and p' can 
also be proved in ZFC - . Corollary 9 shows that the use of collection is essential to 
this argument, and one cannot obtain in some other way a formula ip' of reduced 
complexity that is provably equivalent in ZFC- to ip. 

Corollary 9. Relative to a measurable cardinal, the collection of formulas that are 
provably equivalent in ZFC- to a Y^i-formula or a Ui-formula is not closed under 
bounded quantification. 

Proof. Let ip(x) be the formula asserting that all elements of x are countable, 
meaning that for each nonempty y G x there exists a surjection from lo onto y. 
The formula tp(x) is clearly obtained by bounded universal quantification over a 
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£i-formula, but we will show that it is not provably equivalent in ZFC- to any 
Si-formula or Ili-formula. Consider the Ei-elementary embedding j : W — > M 
from theorem 8 and note that the model W satisfies ip(n) since it has collapsing 
functions for all ordinals below n. If there would be some £i-formula ip'(x) such 
that ZFC- proves Vx((p(x) -f-> ip'(x)), then it would follow that W \= and 
so M \= ip'(j(K)) by the Si-clementarity of j : W -> M. Since M |= ZFC- , it 
would then follow that M \= <p(j( K )), which means that k would be countable in M, 
which is not the case. The same argument shows that there cannot be a Ili-formula 
provably equivalent in ZFC- to <p. □ 

We will improve this result by avoiding the need for a measurable cardinal in 
section §2.7. Also, in subsequent sections, we will obtain counterexamples to the 
Los theorem involving ultrafilters that exist inside the model, including ultrafilters 
on u) when P(u>) exists, as well as other violations of the Los and Gaifman theorems, 
and other counterexamples that do not require any large cardinals. 

2.5. A cofinal restriction of an elementary embedding. In the previous sec- 
tion we proved that the Gaifman theorem can fail for ZFC- models, in the sense 
that there can be j : M — > N for transitive ZFC- models M and N, which 
is Ei-elementary and cofinal, but not £ 2 -elementary. We would like now to de- 
scribe a dual situation, where one has a fully elementary but non-cofinal embed- 
ding j : M — > N of transitive ZFC- models, whose canonical cofinal restriction 
j : M — » (Jj " M is not elementary. Note that since M and N are transitive, then 
so is (J j " M, since it is a union of transitive sets (using replacement, one shows that 
M satisfies for every set, there is a set that is its transitive closure). The restriction 
j : M — t [Jj " M is a Ei-elementary embedding, since it is clearly Ao-elementary 
and also cofinal, but theorem 10 shows that it need not be E2-elementary if col- 
lection fails in M. This stands in contrast to the situation when M \= ZFC~ and 
j : M — > N is fully elementary, since one can then argue that \J j " M ~< N by the 
Tarski-Vaught test and conclude that j : M — > \J j " M is fully elementary. 

Theorem 10. Relative to a measurable cardinal, it is consistent that there are 
transitive models M and N of ZFC- with a fully elementary embedding j : M — > N, 
whose cofinal restriction j : M — > (J j " M is an embedding of ZFC- models that is 
not £2- elementary. 

Proof. Let us suppose that n is a measurable cardinal in V. Let V[G] be the 
Levy collapse of k, meaning that G C P = Coll(o;, <k) is ^-generic, and let W — 
U 7<K ^[G 7 ], as in section §2.3, so that we know W |= ZFC-. Let j : V -> M be 
the ultrapower by a normal measure /i on n in V, and consider the forcing j(P) = 
Co11(cj, <j(n)), which can be factored as j(F) = PxP^u, where P K j( K ) is the part 
of the forcing collapsing cardinals in the interval [k, j ' (k)). Suppose that H C P KJ ( K ) 
is F[G]-generic. Since G x H is F-generic for j (IP) and j " G = G, it follows that j 
lifts to the fully elementary j : V[G] -+ M[j(G)] in V[G] [H], where j(G) =GxH. 
Since W is definable in I^[G], using Laver's result [Lav07] on the uniform definability 
of the ground model in the forcing extension from the generic filter and a poset- 
dependent parameter, we may restrict j to W and obtain in V[G][i/] the fully 
elementary embedding j \ W : W — > j(W), where j(W) — U7<j( K ) 
the uniformity of Laver's definition. The cofinal restriction j \ W : W — > [j j " W is 
Ei-elementary, but it is not fully elementary, since all ordinals below k are countable 
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in W, but the ordinal k below j(n) cannot be countable in (J j " W, since it is easy 
to see that [jj " W C [j 1<K M[j{G) 1 ] = [j 1<K M[G 1 ] and no M[G 7 ] can collapse 
cardinals above 7. The assertion " k = Wi" has complexity n 2 , and we observe 
more precisely that j : W — > [jj " W is not E 2 -elementary. The embedding 
j \ W : W — > is thus not cofinal, but to see this directly, note that, for 

example, the reals added by j{G) K are in j(W) but not in [jj " W. 

Indeed, [jj " W = \Jj <k m [Gj}, since x £ M[G 7 ] implies that x = j'(/)(k) 
for some function / 6 V"[G 7 ], as the restriction of j to V[G 7 ] is a lift of the 
ultrapower map j and hence an ultrapower map as well, and consequently x £ 
i(ran/) C\Jj" W. It follows that [jj "W satisfies ZFC-. Note finally that the 
map j \ W : W — > [j j " W is precisely the ultrapower of W by ^* as described in 
section §2.4 by uniqueness of the lift of j to each F[G 7 ]. □ 

Theorem 10 can be used to show that standard arguments from seed theory 9 , 
permissible in the context of ZFC~ models, can fail in the context of ZFC- models. 

Corollary 11. Relative to a measurable cardinal, it is consistent that there are ele- 
mentary embeddings j : M — > N of transitive models of ZFC- and sets S C [jj " M 
such that the seed hull X5 = {j(f)(s) \ s € [S'] <u , / £ M} is not a Si- elementary 
substructure of N, and such that the restriction j : M — >■ X5 is not S2- elementary. 

Proof. Consider the elementary embedding j \ W : W — > j{W) of the proof of 
theorem 10 and let X {k} = {j (/)(«) | / : k ->• W, f £ W} be the seed hull of 
{«} via j. Observe that = [j 7<K M[G 7 ]. The seed hull is not a £1- 

elementary substructure of j(W), since if it were, then would have a surjection 
from uj onto k, but we know that this is not the case, since no M[G 7 ] collapses k 
if 7 < k. □ 

2.6. Violating Los with a measurable cardinal inside the model. We shall 
now modify the construction of section §2.4 in order to arrive at a more definitive 
violation of the Los theorem for ZFC- models, by producing a model W \= ZFC- 
in which there is a measurable cardinal k whose powerset P(k) exists in W and 
for which there is a K-complete normal ultrafiltcr /1 on k in W, whose ultrapower 
Ult(W, /u) is well-founded and can be constructed and collapsed inside W, but the 
ultrapower map j :W — > Ult(Wi/x) is not elementary. 

Theorem 12. Relative to a measurable cardinal, it is consistent with ZFC- that 
there is a measurable cardinal k for which P{n) exists and there is a n-complete 
normal measure on k, whose ultrapower is a well-founded model of ZFC- that can 
be constructed and collapsed, but for which the Los theorem fails at the T,i-level and 
the ultrapower map is not S 2 - elementary. 

Proof. The idea is to combine the methods of sections §2.1 and §2.4, but performing 
all the collapse forcing only above the measurable cardinal, so that this cardinal 
and its measure will be preserved to the extension and to the resulting model W 
of ZFC-. Suppose that n is a measurable cardinal in V \= ZFC + GCH, and 
let A = k(+' k = H K+K , the n th cardinal successor to n. (The GCH assumption 
can be relaxed simply by using H K + K in place of A.) Let P be the Levy collapse 
of A meaning the bounded-support product Co11(k + ,<A) = U a<K Co11(k+, H k+q ). 
Although the forcing Co11(k + , N K+Q ) on any coordinate H K+Q is <K-closed, the P 



9 For a review of elementary seed theory, sec for instance [Ham97] . 
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forcing is not <K-closed because of the bounded-support requirement, and in the 
limit P will actually collapse A to k, since the function mapping a < n to the first 
ordinal used on coordinate H K+Q , will map n onto A. But every initial segment of 
the forcing P 7 = II a < 7 Co11(k + , K k+q ), for 7 < n, is <K-closed and therefore adds 
no subsets to k. 

Suppose that G C P is V^-generic for this forcing, and let G 7 = G (~l P 7 . Our 
intended model is W — U 7 < K ^[G 7 ], which satisfies ZFC-, by arguments analogous 
to those previously given, but not collection. To see that collection fails in W, 
observe that for each a < n there exists a surjective function / : k + -» K^ +Q in W, 
but there cannot be a set in W collecting a family of such functions. 

Since all P 7 arc <K-closed, we have that P(n) v = P(k) v ^ = P(k) w . Thus, 
P(k) exists unchanged in W. Furthermore, if /z is any normal measure on n in V, 
then /z continues to be a normal measure on k in W. Note that for every x G W, 
the collection of all /:«;—> x forms a set in W since if x G V[G 7 ], then no 
new functions from k to x are added by subsequent collapses. Therefore W can 
construct the ultrapower Ult(W, /z) as the union of the ultrapowers Ult(ar,/x) over 
all transitive sets x G W and take its Mostowski collapse (this requires replacement) 
to a model M and let j : W — > M be the resulting embedding. 

We shall now observe that Los already fails at the £1 -level for this ultrapower and 
that the map j : W — > M is not ^-elementary, using the violation of collection 
described above. Let h be a function on n in V C W such that h(a) = N«+ a , 
and recall that for all a < k, the model has surjections from k + onto h(a) 
but no collecting set of such functions. It follows that there cannot be a surjection 
[/] : ~* [h] in the ultrapower, since otherwise the set {a < k \ f : k + h(a)} 

would be an element of \i (by Los for A -formulas), yielding a collecting set, and thus 
Los fails at the Si -level. It also follows that the ultrapower map j is not elementary 
for the n 2 -formula Va < n3f f : k + h(a) using k + and h as parameters, since 
otherwise the ultrapower would have a surjection from n + onto j(h)(n) = [h]. 

It remains to argue that M is nevertheless a model of ZFC-. Let j : V — >• M be 
the ultrapower embedding by /x in V. Since the forcing P 7 is <K-closed, it follows 
that j lifts uniquely to j 7 : V^[G 7 ] — > M[j(G 7 )], where j{Gj) is the filter in j(P-y) 
generated by j " G 7 . (This is generic since every open dense set D C j(P 7 ) is 
j(D)(n) for some D = (D a a < k) with Z? Q C P 7 open dense, and by <K-closure 
it follows that D = (~} a D a remains dense and has j(D) C D; since G 7 meets 
D, it follows that j " G 7 meets j(D) and hence D, as desired.) We claim that 
M = U 7 <a M \J( G i)] and i = U 7<K h b y the ma P that associates G Ult(W,/x) 
to in any Ult(V[G 7 ], /x) for which / G F[G 7 ]. This association is well-defined 
and G-preserving, since if / G ^[G 7 ] and 7 < 5 < k, then j 7 (/)(k) = [f]^ as 
computed in Ult(V[G 7 ],/x), which is the same as js{f){n) = [f]^ as computed in 
\J\t (V [G s], fJ,), by the uniqueness of the lifted embeddings. The association is onto 
and hence an isomorphism, and it commutes with the ultrapower maps. Since 
M = U 7 <a (G-y)] , it follows that M is obtained from M by Levy collapsing all 
cardinals below Kj( K ) +K to using bounded-support, as computed in M, and 

it follows by the usual arguments that M \= ZFC-. □ 

2.7. Violating the Los and Gaifman theorems without large cardinals. 

Analogous arguments as in theorems 8, 10 and 12 and corollaries 9 and 11 work in 
the context of elementary embeddings characterizing smaller large cardinals. For 
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instance, if k is weakly compact, we can find a transitive set M \= ZFC of size k 
with k, V K € M and an ultrapower map j : M — > N by an M-normal measure on k 
such that N is transitive. The poset Co11(cj, <h) is an element of M as it is definable 
over V K , and so in V[G], the Levy collapse of k, we may form the forcing extension 
M[G] and let W = U 7<K M[Gj], which satisfies ZFC-, but not collection. The rest 
of the constructions now proceed identically to those previously given. 

In fact, these arguments can be modified to work with elementary embcddings 
of transitive models whose existence follows directly from ZFC, thereby avoiding 
any need for large cardinals. 

Theorem 13. There are transitive set models M and N of ZFC- with a fully 
elementary embedding j : M — > N, whose cofinal restriction j : M — > \Jj " M is 
not ^-elementary. 

Proof. We start by constructing an appropriate elementary embedding j : M — >• N 
with critical point cof 1 . First, we may assume without loss of generality that GCH 
holds, by passing if necessary to an inner model. Let 9 > 2 Nl "i be any regular 
cardinal. Let X be a countable elementary substructure of Hq with Mostowski 
collapse ttx ■ X — > M, and observe that uj^ exists in M, and that M \= ZFC". 
Using CH, let Y D X be an elementary substructure of Hq of size U!\ with Y u C Y. 
Let tty ■ Y — >• N be the Mostowski collapse of Y, and observe that N \= ZFC" and 
7V W C N. The composition map j — tty ° tt^ 1 is then an elementary embedding 
j : M — > N with critical point w^ 1 , that is lo^ 1 < jX^i^) — w i = w ii so that ujf 1 is 
a countable ordinal in N. 

Working inside of the model M, note that exists and we may thus 

consider the Levy collapse of K W1 to lu 2 , meaning the bounded-support product 
P = Co11(cj 2 , <H W1 ) = U fj<UJ1 Coll(wi, tip). The forcing P is countably closed in M, 
but not <wi-closed because of the bounded-support requirement, and in the limit 
P will actually collapse N Wl to ui, since the function mapping a < lo\ to the first 
ordinal mentioned on coordinate H Q will map w\ onto K Wl . 

Since P is the Levy collapse of to cu™ , as computed in the model M, it 
follows by elementarity that j (IP) = Coll(u;2, <N U J JV is the Levy collapse of to 
u>2 , as computed in N. Note that j(P) is countably closed, since it is countably 
closed in N and TV" C N. We aim to lift the elementary embedding j : M — >• N 
to forcing extensions of M and N by P and j(P), respectively, using generic filters 
that exist in V. Since M is countable, there exists an M-generic filter GCP that 
is generated by a countable descending sequence {jp n \ n G lo} of conditions in P. 
By closure of we can find a condition q <E j(P) that is below all the j(p n ), and 
since N has size u>\, we can build an iV-generic filter j(G) C j(P) having q as an 
element. It follows that j " G C ?(G), and so we can lift the embedding in U to 
j:M[G]->JV[j(G)]. 

For each 7 < ujf 1 , let G 7 =GnP r Our intended model is W = U 7<W M M [G-y], 
which satisfies ZFC-, by arguments analogous to those previously given, but not 
collection. To see that collection fails in W, observe that for every a < H^, the 
model W has a surjective function / : u!^ 1 -» a, but no set containing a family of 
such functions by the chain condition of P 7 as the GCH holds in M, and thus there 
cannot be a set in W collecting a family of such functions. 
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We may assume without loss of generality that W is a definable class in M[G], 
by starting the construction if necessary 10 in an inner model such as L. We may 
therefore restrict j to W and obtain, as in theorem 10, a fully elementary embedding 
j r W : W -> j(W), where j(W) = |J 7 < W1 N\j(G)J]. The canonical cofinal 
restriction j \ W : W —> [J j " W is -elementary, but it is not fully elementary, 
since for each a < there is a function in W collapsing a to ui^ 1 , but there is 
no function in [jj "IfC \J j<0J m N\j(G) 7 ] that collapses the cardinal which 

is strictly below j(H^) = H^, since no ./V[j(G) 7 ] collapses cardinals above ft^. 
Altogether, we have observed that there are no cardinals between oj^ 1 and in 

but there are cardinals in (J j " W between = an d j(N^) = 

since itself is such a cardinal. Since the assertion "A = 5 + " where A = 

and S — u^ 1 has complexity II 2 , it follows that the cofinal restriction j \ W : W — > 
[Jj " W is not S 2 -elementary. □ 

Using the map j : W — > U j " W from theorem 13, it is easy to obtain the result 
of corollary 9, this time without large cardinals. 

Theorem 13 can also be used to provide failures of the elementarity of seed 
hulls, but in addition to the violations of corollary 11, we now obtain for a single 
elementary embedding j : M — > N uncountably many distinct seed hulls Xg that 
arc not elementary substructures of N and that are not generated by a single seed. 
Indeed, consider the elementary embedding j \ W : W — > j(W) from the proof of 
theorem 13. Let S C (J j " W be any seed set containing ~& N M as a subset and note 
that Xg C (J j " W. The seed hull X5 cannot be generated by a single seed, since W 
is countable, but Xg is uncountable. If X5 were Ei-elementary in j{W), then Xg 
and hence \Jj"W would contain a surjection from oj^ 1 onto H^ M , but we argued 
already in theorem 13 that this is not the case. Observe that there are uncountably 
many distinct seed hulls: Since N is closed under countable sequences, it follows 
that N\j(G)] w C N[j(G)} and consequently j(W) u C j(W), and so j \ W is an 
element of j(W). The model j(W) can construct seed hulls for seed sets S £ j(W) 
of different cardinalities in j(W), and the corresponding seed hulls Xg are thus 
all distinct. Lastly, the map j : W — > X5 is a Ei-elementary cofinal map that is 
not £2 -elementary, and the same is true for the map ir o j : W — > ran(7r) where 
7r : X5 — > ran(7r) denotes the transitive collapse of Xg. These two maps provide 
therefore counterexamples to the Gaifman theorem in the ZFC- context for maps 
that are not ultrapower maps. 

Essentially the same arguments as in theorem 13 allow us to obtain a failure of 
the Los theorem, without any need for large cardinals. 

Theorem 14. There is a transitive set M |= ZFC- and an M-normal measure 
M 5= P{^i) M f or which the ultrapower of M by is a well-founded model of ZFC- , 
but the ultrapower map is not S 2 - elementary, and Los fails at the Y,\-level. 

Proof. Following the proof of theorem 13, we obtain an elementary embedding 
j : M — > N with critical point uf 1 , where M is the Mostowski collapse of some 
countable X -< Hg for a regular cardinal > 2 N "i and N is the Mostowski collapse 
of some Y -< Hg with X CY. If fi C P(ui) M is the M-normal measure on ui^ 1 that 



In general, it seems unclear whether W is definable in M[G], since the proof of Laver's 
theorem [Lav07] on the definability of the ground model makes essential use of the power set 
axiom. 
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is obtained from j : M — > A by using tof 1 as a seed, then the ultrapower Ult(M, /j) 
of M, using functions on ojf 1 in M, is well-founded, and so we may assume without 
loss of generality that j : M — > A is the ultrapower by /i. It follows, in particular, 
that A is countable. 

Again, we assume that GCH holds. As in theorem 13, we consider the bounded- 
support product P = Coll(w2, <N Ul ) M , and since M is countable, choose in V an 
M-generic filter GCP and let G 7 = G n P 7 for each 7 < cuf 1 . Our intended model 
is again W — \J 1<w m M[G 7 ]. Since each initial forcing P 7 is <ix>i-closcd in M, it 
follows, as in theorem 12, that j : M — > N lifts uniquely to j 7 : M[G 7 ] — > A[j(G 7 )], 
where j(G 7 ) is the A-generic filter in j(P) generated by j " G 7 , and the map j 1 
is necessarily equal to the ultrapower map of M[G 7 ] by [i. It follows that the 
ultrapower Ult(VF, /z) of W, using functions on ui^ in W, is well-founded, since if 
j : W — > N is the ultrapower map, then A = [J 7<lj m A[j(G 7 )] and j — U 7 < w j" 3 7 
via the isomorphism that associates € V\t(W 7 fi) to in any Ult(M[G 7 ], fi) 
for which / S M[G 7 ]. Thus, A satisfies ZFC-. An argument analogous to that in 
the proof of theorem 13 uses the violation of collection to show that Los fails at 
the £i-level and the ultrapower map j : W A is not S 2 - elementary. Thus, j 
witnesses the failure of both the Los and Gaifman theorems. □ 

2.8. Violating Los for ultrapowers on u>. In this final section, we aim to pro- 
duce a counterexample to the Los and Gaifman theorems for ZFC- models for 
ultrapowers by ultrafilters on co. 

Theorem 15. In a forcing extension V[G] by the Levy collapse G C Coll(Hi, <K W ) 
there is a transitive class inner model W \= ZFC- in which P(to) exists and there is 
an ultrafilter /1 on uj, such that the ultrapower map j : W — > Ult(VF, /1) is definable 
in W , but is not £2- elementary and, indeed, Los fails at the Yi\-level. 

Proof. First, we may assume without loss of generality that GCH holds in V, by 
passing if necessary to an inner model such as L. Suppose that G C Coll(Hi, <H W ) 
is ^-generic for the Levy collapse up to H^, that is, the finite-support product 
P = n^Coll^!,^). Let W = \J n V[G n ], where G n = GnP„ and P„ = 
ILc< n Coll(Hi, Hfe). The model W satisfies ZFC-, but not collection. Since each 
P„ is countably closed and therefore does not add subsets to w, we have P(oj) v — 
P(cj) y [ G "l = P{lo) w , meaning that P{oj) exists in W. If \i is any nonprincipal 
ultrafilter on oj in V, then it continues to have this property in W. Let j : W — >■ 
Ult(Vl / , /i) be the ultrapower of W by /i, as computed by W. The model W is 
able to take the ultrapower since for every x G W, the collection of all / : u — > x 
forms a set in W since if x G V[G„], then no new functions from k to x arc added 
by the subsequent collapses. The failure of Los at the Si-level and the failure 
of elementarity for the ultrapower map at the S2-level follow from the violation 
of collection as in the previous arguments. The Gaifman theorem fails for this 
embedding as well, as it is Ei-elementary and cofinal. □ 

3. Some final remarks 

It is clear that the method of proof of our theorems is both flexible and general 
and would easily adapt to the use of other cardinals than the ones we have used. For 
example, in section 2.1 we could have collapsed to different cardinals, as in theorems 
12 and 15, in order to show that other successor cardinals can be singular, or that 
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several cardinals might be singular. Indeed, [Zar96] provides a general framework 
for producing models of ZFC-, involving forcing over the weak product of w-many 
copies of a family of forcing notions, and forming the desired model via increasing 
finite portions of the product. The proof that his general framework succeeds 
amounts essentially to the particular arguments we made for our iterations, where 
we swapped two copies of the forcing P„ or P 7 and appealed to almost homogeneity. 
Although we could have appealed to Zarach's general framework, we chose simply to 
give a direct argument in each case in order to achieve a self-contained presentation. 
But we refer any reader interested in producing even more badly behaved models 
of ZFC- to consult Zarach's general framework. The violations of Los that we 
produced in our example can also be summarized in a general framework, as may 
be deduced from the examples we provided in the paper. For our own part, we shall 
from now on prefer the models of ZFCT over ZFC-, and we take the results of this 
article to show definitively that ZFC- is the wrong theory for most applications of 
set theory without power set. 
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